Examine your users and decide who needs access to which apps and asset groups. Consider grouping them by business unit or geography. By default, all users who are not designated as administrators in Cloud Marketplace are application testers. Decide which users need to be only report viewers and change their role.

Asset groups represent abstract components of your organization, like "finance" or "engineering". Administrators can restrict access to specific applications by assigning them to an asset group and limiting the users who belong in the group.

Users

User management helps you restrict access to sensitive apps by assigning them to asset
groups and then adding specific users to those groups.

All your existing apps and users initially belong to the default asset group. Your administrator
can move the apps into new asset groups and assign users to them.